CVE

Id
31731  
CVE No.
CVE-2008-1614  
Status
Candidate  
Description
suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341156 31731 CVE-2008-1614 MLIST:[suPHP] 20080330 SECURITY ISSUE: Immediate update advised  View
341157 31731 CVE-2008-1614 URL:http://lists.marsching.biz/pipermail/suphp/2008-March/001750.html  View
341158 31731 CVE-2008-1614 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=439687  View
341159 31731 CVE-2008-1614 DEBIAN:DSA-1550  View
341160 31731 CVE-2008-1614 URL:http://www.debian.org/security/2008/dsa-1550  View
341161 31731 CVE-2008-1614 FEDORA:FEDORA-2008-2815  View
341162 31731 CVE-2008-1614 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00014.html  View
341163 31731 CVE-2008-1614 FEDORA:FEDORA-2008-2868  View
341164 31731 CVE-2008-1614 URL:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00075.html  View
341165 31731 CVE-2008-1614 BID:28568  View
341166 31731 CVE-2008-1614 URL:http://www.securityfocus.com/bid/28568  View
341167 31731 CVE-2008-1614 SECUNIA:29648  View
341168 31731 CVE-2008-1614 URL:http://secunia.com/advisories/29648  View
341169 31731 CVE-2008-1614 VUPEN:ADV-2008-1073  View
341170 31731 CVE-2008-1614 URL:http://www.vupen.com/english/advisories/2008/1073/references  View
341171 31731 CVE-2008-1614 SECUNIA:29615  View
341172 31731 CVE-2008-1614 URL:http://secunia.com/advisories/29615  View
341173 31731 CVE-2008-1614 SECUNIA:29872  View
341174 31731 CVE-2008-1614 URL:http://secunia.com/advisories/29872  View
341175 31731 CVE-2008-1614 XF:suphp-files-privilege-escalation(41582)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50337 JVNDB-2008-005647 Watchguard Firebox の PPTP VPN サービスにおける有効なユーザ名をリスト化される脆弱性 Watchguard Firebox の PPTP VPN サービスは、MS-CHAPv2 認証のハンドシェイクを実行している際、ユーザ名が有効か無効かで異なるエラーコードを生成するため、有効なユーザ名をリスト化される脆弱性が存在します。 CVE-2008-1618 31731 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005647.html  View